Senior IT Security Operation Architect - Saudi National- Riyadh, KSA

DS DeepSource; Riyadh; On-site; SAR 450,000 - 750,000; Full time

Job summary

DS DeepSource is seeking a Senior IT Security Operations Architect to design and govern the security operations framework across enterprise hybrid infrastructure. You will align SIEM/SOAR, EDR/XDR, IAM, and CSPM tools with business goals and regulatory standards.

You will lead architecture design, SOC workflows, and risk mitigation strategies, while ensuring compliance with NCA-ECC, SAMA, ISO 27001, and NIST CSF across Azure, AWS, and on‑prem environments.

Qualifications

• 10+ years in IT security with 4+ years as a Security Architect or Principal Security Engineer
• Design enterprise SOC pipelines and SIEM/SOAR architectures
• Hybrid cloud security architecture (Azure, AWS) with Zero Trust implementations
• Governance frameworks and local regulatory compliance (NCA-ECC, SAMA, ISO 27001, NIST CSF)
• Advanced architecture certifications: CISSP-ISSAP, CISM, SABSA, TOGAF, CCSP

Responsibilities

• Design scalable security architectures for enterprise hybrid environments (On-Prem, AWS, Azure)
• Build and optimize SOC workflows, SOAR, and SIEM architecture
• Architect deployment and lifecycle management of Next-Gen Firewalls, EDR/XDR, PAM, CSPM tools
• Establish threat hunting programs and alignment with red/blue teams
• Ensure compliance with local regulatory frameworks and global standards

Skills

SOC pipelines design

SIEM/SOAR architectures

Incident response playbooks

Zero Trust

Hybrid cloud security

Regulatory compliance

Education

CISSP-ISSAP, CISM, SABSA, TOGAF, or CCSP

Tools

Splunk

Microsoft Sentinel

Cortex (XSOAR)

Palo Alto

Fortinet

PAM

CSPM tools

Job description

The Senior IT Security Operations Architect designs, builds, and governs the overarching security operations framework, SOC architecture, and threat mitigation strategies across enterprise hybrid infrastructure. This strategic and technical role aligns operational security systems (SIEM/SOAR, EDR, IAM, Network Defense) with business goals, cloud environments, and national compliance standards.

Key Responsibilities

• Architecture & Strategy Design: Design scalable security architectures for enterprise hybrid environments (On-Premises, AWS, Azure), integrating Zero Trust models and operational security controls.
• SOC & SOAR Integration: Build and optimize Security Operations Center (SOC) workflows, automation playbooks (SOAR), and SIEM architecture to reduce incident response time and eliminate operational fatigue.
• Security Tool Engineering Oversight: Architect the deployment and lifecycle management of Next-Gen Firewalls (Palo Alto, Fortinet), EDR/XDR ecosystems, PAM, and Cloud Security Posture Management (CSPM) tools.
• Threat Intelligence & Resilience: Establish proactive threat-hunting programs, red/blue team operational alignment, and high-availability disaster recovery frameworks.
• Governance & Regulatory Compliance: Ensure all operational security designs strictly comply with local regulatory frameworks (NCA-ECC, SAMA CSF) and global standards (ISO 27001, NIST).

• 1. Minimum 10+ years of progressive experience in IT security, with at least 4+ years as a Security Architect or Principal Security Engineer managing enterprise SOC frameworks.
• 2. Deep expertise in designing enterprise SOC pipelines, SIEM/SOAR architectures (Splunk, Sentinel, Cortex), and automated incident response playbooks.
• 3. Proven track record in hybrid cloud security architecture (Azure, AWS) and Zero Trust Network Architecture (ZTNA) implementations.
• 4. Hands-on mastery of governance frameworks and local regulatory compliance (NCA-ECC, SAMA, ISO 27001, NIST CSF) in Saudi Arabia or the wider GCC.
• 5. Hold advanced architecture certifications such as CISSP-ISSAP, CISM, SABSA, TOGAF, or CCSP.